Kjell Tore Guttormsen 52084204da docs(llm-security): describe the base64 exfil payloads instead of showing them ... v8.1.0 S2. security-assessment.md (two blobs, one split, plus the decoded exfil command) and the base64 pipe-to-shell one-liner in knowledge/skill-threat-patterns.md now describe the payload rather than reproduce it. The entropy path-suppression test builds its 84-char blob from 12-char fragments, so no contiguous decodable blob sits on disk. av-surface: b 5->0. a=0 a2=0 b=0 c=0 d=0 - the probe is green. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-09-22 13:23:24 +02:00
..
bash-evasion-gallery	feat(llm-security): add 3 more runnable threat examples [skip-docs]	2026-05-05 15:01:20 +02:00
lethal-trifecta-walkthrough	feat(llm-security)!: v8 Phase 3 complete - riskScoreV1, posture heuristic, docs	2026-08-09 10:25:03 +02:00
malicious-skill-demo	docs(llm-security): describe the base64 exfil payloads instead of showing them	2026-09-22 13:23:24 +02:00
mcp-rug-pull	feat(llm-security): add lethal-trifecta + mcp-rug-pull example contents [skip-docs]	2026-05-05 14:45:39 +02:00
poisoned-claude-md	test(llm-security): store the poisoned-claude-md fixture encoded	2026-09-22 13:22:10 +02:00
pre-compact-poisoning	feat(llm-security): add pre-compact-poisoning example for PreCompact hook [skip-docs]	2026-05-05 15:23:10 +02:00
prompt-injection-showcase	feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command	2026-04-08 08:58:35 +02:00
supply-chain-attack	feat(llm-security)!: v8 Phase 3 complete - riskScoreV1, posture heuristic, docs	2026-08-09 10:25:03 +02:00
toxic-agent-demo	feat(llm-security): add toxic-agent-demo example for TFA scanner [skip-docs]	2026-05-05 15:15:04 +02:00